2 items across 2 sections
A security company got breached through one exposed AWS API key on an internet-reachable instance. Even the people who build WAFs for a living can miss this.
Plaintext passwords in a Lambda environment variable, a key in a public GitHub repo. Real, common, and usually found by scanning, not by luck.
Our AWS security experts can help you implement best practices across all these topics.